MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2260d8b420d5d0527861223f2e0224bba2f511be26311cbbd87cc94f0728ac53. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	2260d8b420d5d0527861223f2e0224bba2f511be26311cbbd87cc94f0728ac53
SHA3-384 hash:	91ca922b2fac8eeb278034144a4b850a167a0e35b24f3c0593248509087bd5201bf1b47d64d467698f478cf89009a174
SHA1 hash:	58b98319aa971d371507a6cd2f6f8a04aec6afc2
MD5 hash:	f5709ab5e01f20ce9f496811db4ed5db
humanhash:	happy-quiet-fix-west
File name:	fc8a35f8-7b92-4b58-9cba-c324a336670c.ps1
Download:	download sample
Signature	ZigClipper Alert Create hunting rule
File size:	140'903 bytes
First seen:	2026-04-04 23:15:17 UTC
Last seen:	Never
File type:	ps1
MIME type:	application/octet-stream
ssdeep	3072:0t6uEmBdsREysfHmqTYKCKk4xN3seKV8kI:4NsSojA1seJl
TLSH	T1D4D3C0D8D468CE9FB366F03DE45AECB4D0C94149E6208DBBB064E36532F5391146EE2B
Magika	unknown
Reporter	aachum
Tags:	dropped-by-ACRStealer ps1 tnt-unguidedfreewill-co ZigClipper

iamaachum

https://cdn-1415.brightcanvas.digital/fc8a35f8-7b92-4b58-9cba-c324a336670c

ZigClipper C2: https://tnt.unguidedfreewill.co/

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

50

Origin country :

ES

Vendor Threat Intelligence

ACCE

Gathering data

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=69d368d16a61012f6acf46fd

Tags:

n/a

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

unknown

Link:

https://opentip.kaspersky.com/2260d8b420d5d0527861223f2e0224bba2f511be26311cbbd87cc94f0728ac53/results?tab=lookup

Joe Sandbox clean

Result

Threat name:

n/a

Detection:

clean

Classification:

n/a

Score:

3 / 100

Link:

https://www.joesandbox.com/analysis/1893890

Behaviour

Behavior Graph:

n/a

CERT.PL MWDB

Gathering data

ReversingLabs TitaniumCloud

Gathering data

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=ejqnrnba2xife6dbei7s4arexorpken6eyyrzo6ypteu6bzivrjq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.20

Link:

https://yomi.yoroi.company/submissions/2260d8b420d5d0527861223f2e0224bba2f511be26311cbbd87cc94f0728ac53